Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    03/05/2024, 03:55

General

  • Target

    0f9d0c041c81d99c0772ae2d9a21a0f3_JaffaCakes118.html

  • Size

    94KB

  • MD5

    0f9d0c041c81d99c0772ae2d9a21a0f3

  • SHA1

    c4f12da0c67f6bd7b0124cb54fa674ff20896ec5

  • SHA256

    aa8cac33e4161e9576ac740dd0cb63009babca51e15141e3716fcf8db3ecbddb

  • SHA512

    8da40a4a374d54c225bb30248ce01aad0a5efeb2a63c78a7d1e4c7c852b93879d53703626d6cac83a6bdb74263bac31f8deada34b46f647658a443ce3defc554

  • SSDEEP

    1536:WMLiNYfcEJQD3UN7L24/3FLofAyvI4f9Zqy6rQWBdkrY8mgHC+qpEyW:WAiil1BdkrY8mgHC+qpEyW

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0f9d0c041c81d99c0772ae2d9a21a0f3_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3068
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3068 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1720

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c4c81fa00a0d2d9437a37330ccaef848

    SHA1

    eb18283c83815f32a739c01bc6154e6b6add5fd1

    SHA256

    e865232ac2e9e61473a6300b8c02ed2556fb02e2550f13699d4aaa925fa2ada7

    SHA512

    85dc29b7041ce1a74649b646bdfed305cb9caf5f82a47f7c571695bdcc406e176cefe19c6ec355a61c758c6a667af11fac05a2cd7cf143c34aaf9bbbd1310673

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    34940620edd2dda31a70767f44d6a7b8

    SHA1

    fa8e31646b99f86096ffd9eb23f2833c1f8fa9f4

    SHA256

    24371607af53a21cd729f9b932355757f004558d19a9ab7c67b4bf44ae45f544

    SHA512

    b0d6faef0db95c9581ce5446d714ee43cbfc8fee3d5e645883b850f147437b05a3770eb681eb6a7af8d9ca510601c22a02f8c20431d2a652b7dd13868fe2f120

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d055b6bd3ba9eb68e7d300354a1b3cc9

    SHA1

    40d99ffc740daa3b73e1927ddfb3460c1c510831

    SHA256

    b315b691a4ea3f3bdbe3829e16d8afe9b2c3daf2de9f43f1711bf3b0a5641676

    SHA512

    0aa2429c67bcf07372c4bf991d973532126d6ac66ade0e10f98350d6a8ebf3adac40601e0eb0fc70f09137680e4a081716b6dae7b2c7b5f591d941aa85d6057e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    37d9a0503c9e2252f733d5e7bfb37f3f

    SHA1

    b73989d215ea819afe74ea273e9d544776b27e26

    SHA256

    c7c168f170673d1cce134bff6985d562a2b17d2eab3a471cb80e46ba401cae3f

    SHA512

    f73aab1148d9ca617804f55888b1f8aab921881b10301e659dac9de2cd32f9c3c2cabc92bbbd456220392d517c406077be6b4480b170d11fb943d00cbb844796

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5116dd0da88c1b788cb477f848ff0b6a

    SHA1

    063dd93d013127e07608513d001b77bb662784ed

    SHA256

    c8be8da839da70ee8158e0db14dca2dae1f870479123679ac47b521b22910e21

    SHA512

    a5b806fb7b3083dc1cc264f567566a1149bc509d9decef30ff564e543d559e1bef7884c58ccb36bc44ce43a98cad1753f3cd44a7c9460abe3eaa9e2289f9c0cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9d44a4c94bf94183372e29bf99fbcdce

    SHA1

    3d2b652fd63976aef21c910724863d5276b44c30

    SHA256

    6dac8e7d0fa2c306c032ad5f9e67de99d475664e2360ecbfdca9f48511fd910e

    SHA512

    cec0eb1504da58fc63ee372725098ba968302714e54ac422460c7fdcdd4f0af6ac852bb76bd979279bd128fe370b3101175cb93011108886ae772316260a187e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    75014b8667f84975e5b5401f9c4d967e

    SHA1

    100718c0542097bc1f150048ad492062d90172ae

    SHA256

    1f24eb490f3262475c1a2d782fcbff6820d252c4605926e56143f2f4da44f28d

    SHA512

    3789f3b1710c3e519bfdc2722bfd2a38fce5f8ea0893b01d631f721683b39795dd3b50e88e8d47e4d165679e5f651630a2d40cbaf5f51839ba929701164390f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f77d2d06233e8960676b8460d9d2edf1

    SHA1

    7605baa06dd545ce4d5fe4097e16ebd6eb4190ef

    SHA256

    ed793c3869a0a863ad53b73d39afe6079add637f72805bbfd77b6b844e8c2861

    SHA512

    6bb995f7333dd311004230617b673a9c8d3fc332841ac56034dac0ca06ca6a246e5c313ea620f241ff90b3766087357f20ee490bbef2bcadf051520aff1dbf96

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3b4061c032868f4ecf06e61ec52380b6

    SHA1

    b76e1617b00d24ee9216dace563c75f12249fce2

    SHA256

    794354129cc6845db2c645005c34a617a9fe676151fa29251d39cf38f3390bd5

    SHA512

    30983e6e443d9188ee234f0f7e2db8927444bd82c8a9a5f1f99d103aa1a873ca72cffe853cffc740437b5a3efa2aa4dd78d4f0a30638a9db023333019fdb968d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a02ac554b810c06789896f9c2a6d6057

    SHA1

    0de60e65ef4f38f454de13b6525ea0f5d5da6a03

    SHA256

    8baa900562c307edf243e800948978264c54f8195aab09a2763f415d1c1e1342

    SHA512

    ae455e5f58e1278f755fcb65dbfc06555db7c68a07b46441fd9f0a4d40972e1e6d57a6dd635d35c738ec32ebddbbf8fef81e4fe68b8f1f8f78e2864a33c3ec83

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5d8e0b820d0a6fde26d9afb800f1e301

    SHA1

    2f202242d8333b3d964099f198fd2e8931e072c4

    SHA256

    3dad4e81cb3a0ab71976a30373ddbd2df53e657b18a2146732642a7dde33635c

    SHA512

    4b7c26f8228fa0574a47955babf8f97a5a5e169a5ddeecee8b0e0281f67f6a55f91e1a245d228948050aca08a2d2070c329240bcf6bec8a1b9cef8d9bf58b3ba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8ff53d0eec462806a6b1df136df0f689

    SHA1

    482c2d9cb6069b61d32f26eba0d3c5b8b8aec0cb

    SHA256

    0a6d512c30552406a3ac53314ad451c1db9fe2c0dc5a5cf3800910deb5deac52

    SHA512

    ab1a5eca80640c6b35c4543a75789e644c8f01649f8c8e6a3f59a0e60b4a241a1130b7cc5c58ed72666b2637ce443b2b4d1cfc145326a324fdea651162ef9a11

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f26f2443f7609dcefcff2531d71352f1

    SHA1

    454bb0e5f98b0d0a7cb1dcc5deac32cbe4bf9d48

    SHA256

    64bccf38dd3d1f452f717724c7392ef7f2315efe97b14b2ead4bad18df5dbc25

    SHA512

    008d19544a609aafbe31cc8d21fbfb231cb8225256f3bb6d1f6408062895507f88bd78546a94d3f1a2ea4974c1cc0c839fc4388dd2853e7840bc1e742ce432d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fd33eecf1581baf1cec6058e38649797

    SHA1

    4e07ab51a61545fb4ca4aeb37f32488e622170f0

    SHA256

    6576c01630ae5fdac036e73aa57829558bba0de41b299b8f05d8cfc7424c4666

    SHA512

    d1abbda3b2ecde03ed5bfd327c5e12a3142c1daeb7d932edda817c99e84d0425a93873d3828a7365216ce836dfa1b0f77fe1f1e33abd3579c999b46ce80f9546

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d03d0cd1b0524b0ed6a24aa609505c58

    SHA1

    4545abab865c051a732be0b94a562171408d1201

    SHA256

    640d1ec178a5c9cb9a2547f232c07073b499ed1d246f6643e1a791d5c0eb3bd3

    SHA512

    3e67b3f082adbbdd9d7d55723987a560da532bec762808181056483d5476a8ed401a19298abc455f0e01e4b73e89f8b2798b211b878db3410d0a6590a1a819c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    933556d62cdd428842959b8c064644b4

    SHA1

    d8db458cbddc9fd8b664039499bc6c52dce4258e

    SHA256

    b5035a3bd8cf2ba0d8ca603938aed3ed5651a5ce01aa0b32e5a3e00ee0e8e5ae

    SHA512

    f4476ba456799d55f13d364c5a035596d8acee0b0dcc4152c2579132c95ca057d82287dc2bdce4efb56183cb205079eb5c056e49b46b804b000598844683aa61

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8c6d7ab76c7b25ca30481696df5b934f

    SHA1

    150ccdd0368839ce17a8f3cdc0d12f613fd2a629

    SHA256

    b843856a8467cf801ff9bd28ab8d09b0f85375feb44543585b13dd7400c4e2ef

    SHA512

    4f72d75920014d2bb02f26a9e156301ec00201aa572aaa1196ffabfb8b79c02ec921c66002be006448c0e7ed97524b66a7704cbaaf397e42eb562953ff946efb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9abb17b4541aeac88d889069b017f6a0

    SHA1

    bbf288ccfaafdd6494e152f6751d26436ab210fd

    SHA256

    d020bf173fe006072a5429d5df0b27cebd6838063ebc6b24c6c7349490421c49

    SHA512

    292a3f63092ba882988495d4afd0d23c29cb1df7ffbb8a3d1689a91c7ef4f5638af82bf67e5a4d466cc6d04e0c9832cbf410018e993aa790e3b5e014910756c9

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RYNL6UIN\075-GAZO-icon-400x300[1].htm

    Filesize

    162B

    MD5

    4f8e702cc244ec5d4de32740c0ecbd97

    SHA1

    3adb1f02d5b6054de0046e367c1d687b6cdf7aff

    SHA256

    9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

    SHA512

    21047fea5269fee75a2a187aa09316519e35068cb2f2f76cfaf371e5224445e9d5c98497bd76fb9608d2b73e9dac1a3f5bfadfdc4623c479d53ecf93d81d3c9f

  • C:\Users\Admin\AppData\Local\Temp\Cab30E3.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar31A5.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a